https://community.splunk.com/t5/Reporting/How-to-create-pivot-table-containing-some-empty-values/m-p/325320#M5866 <P>Hello. I've got a problem. </P> <P>I have a logfile. <BR /> And I would like to create a pivot table (url, referer) and export it to csv. <BR /> But there is one problem: some refs are empty. <BR /> Then splunk.... exports only these rows where ref is not empty. So, instead of including all rows, the exported CSV contains only ~5%,</P> <P>How to fix it?<BR /> Thank you in advance for your help</P> Fri, 08 Dec 2017 11:48:37 GMT Splunker2018 2017-12-08T11:48:37Z https://community.splunk.com/t5/Reporting/How-to-create-pivot-table-containing-some-empty-values/m-p/325320#M5866 <P>Hello. I've got a problem. </P> <P>I have a logfile. <BR /> And I would like to create a pivot table (url, referer) and export it to csv. <BR /> But there is one problem: some refs are empty. <BR /> Then splunk.... exports only these rows where ref is not empty. So, instead of including all rows, the exported CSV contains only ~5%,</P> <P>How to fix it?<BR /> Thank you in advance for your help</P> Fri, 08 Dec 2017 11:48:37 GMT https://community.splunk.com/t5/Reporting/How-to-create-pivot-table-containing-some-empty-values/m-p/325320#M5866 Splunker2018 2017-12-08T11:48:37Z https://community.splunk.com/t5/Reporting/How-to-create-pivot-table-containing-some-empty-values/m-p/325321#M5867 <P>I don't think the term "pivot table" is relevant. You just need a cross reference table. Try this...</P> <PRE><CODE>your search that returns the records | fields url referrer | eval referrer=coalesce(referrer,"") | stats count by url referrer | fields - count </CODE></PRE> Fri, 08 Dec 2017 19:24:49 GMT https://community.splunk.com/t5/Reporting/How-to-create-pivot-table-containing-some-empty-values/m-p/325321#M5867 DalJeanis 2017-12-08T19:24:49Z